don't allow remote to specify path; bug report 4.3BSD-tahoe/usr.bin/30

SCCS-vsn: usr.sbin/lpr/lpd/recvjob.c 5.10

diff --git a/usr/src/usr.sbin/lpr/lpd/recvjob.c b/usr/src/usr.sbin/lpr/lpd/recvjob.c
index 4e374d2..8f0d5da 100644 (file)
--- a/usr/src/usr.sbin/lpr/lpd/recvjob.c
+++ b/usr/src/usr.sbin/lpr/lpd/recvjob.c
@@ -16,7 +16,7 @@
  */
 
 #ifndef lint
  */
 
 #ifndef lint

-static char sccsid[] = "@(#)recvjob.c  5.9 (Berkeley) %G%";
+static char sccsid[] = "@(#)recvjob.c  5.10 (Berkeley) %G%";

 #endif /* not lint */
 
 /*
 #endif /* not lint */
 
 /*


@@ -186,7 +186,9 @@ readjob()
                                (void) write(1, "\2", 1);
                                continue;
                        }
                                (void) write(1, "\2", 1);
                                continue;
                        }

-                       strcpy(dfname, cp);
+                       (void) strcpy(dfname, cp);
+                       if (index(dfname, '/'))
+                               frecverr("illegal path name");

                        (void) readfile(dfname, size);
                        continue;
                }
                        (void) readfile(dfname, size);
                        continue;
                }


@@ -260,8 +262,6 @@ noresponse()
 chksize(size)
        int size;
 {
 chksize(size)
        int size;
 {

-       struct stat stb;
-       register char *ddev;

        int spacefree;
        struct fs fs;
 
        int spacefree;
        struct fs fs;